XOOPS Module Rha7 Downloads 1.0 (visit.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Rha7 Downloads 1.0 visit.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.rha7.com/ , www.xoops.org/modules/repository/singlefile.php?cid=92&lid=1525 $$ : Free .. :...

XOOPS Module WF-Snippets 1.02 (c) - Blind SQL Injection

XOOPS Module WF-Snippets //'=============================================================================================== //'Script Name: XOOPS Module WF-Snippets = 1.02 c BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page : http://www.xoops.org/ //'$$ :...

CVE-2007-1847

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1846

SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-2006-3341...

Sql injection

SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-2006-3341...

Sql injection

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1847

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1847

CVE-2007-1847 is an SQL injection vulnerability in the Xoops Repository Module, specifically its viewcat.php handling of the cid parameter. The root cause is improper input handling in the Repository module, allowing remote attackers to inject and execute arbitrary SQL commands. Public references...

CVE-2007-1846

SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, different vectors than CVE-2006-3341...

CVE-2007-1846

CVE-2007-1846 is a SQL injection vulnerability in the MyAds 2.04jp (and earlier) module for Xoops, where the cid parameter can be manipulated to execute arbitrary SQL commands. The vulnerability affects the file index.php within the MyAds module and is described as having different vectors than C...

Sql injection

SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1838

SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

XOOPS Module Repository ViewCat.PHP SQL注入漏洞

XOOPS Module Repository是一款基于PHP的WEB应用程序。 XOOPS Module Repository不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'ViewCat.PHP'脚本对用户提交的'cid'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Xoops Module Repository 目前没有解决方案提供： http://www.xoops.org/modules/repository/ http://www.sebug.net/show-exp-1622.html...

Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleXoops Module Virii Info = 1.10 index.php Remote File Include Exploit/title script language="JavaScript"...

xoopswfsec-sql.txt

!/usr/bin/perl Script Name: XOOPS Module WF-Section : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

XOOPS Module PopnupBlog <= 2.52 (postid) BLIND SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== XOOPS Module PopnupBlog XOOPS Module PopnupBlog //'=============================================================================================== //'Script Name: XOOPS...

Malaika System MyAds Xoops模块Index.php SQL注入漏洞

Malaika System MyAds是一款基于PHP的WEB应用程序。 Malaika System MyAds不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Index.PHP'脚本对用户提交的'cid'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Malaika System MyAds 2.04jp 目前没有解决方案提供： http://malaika.s31.xrea.com/ !/usr/bin/perl Script Name: Xoops Module MyAds Bug Fix ...

xoopsvirii-rfi.txt

Xoops Module Virii Info //'=============================================================================================== //'Script Name: Xoops Module Virii Info //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic exploit,but any time :...

XOOPS Module PopnupBlog 2.52 - 'postid' Blind SQL Injection

XOOPS Module PopnupBlog //'=============================================================================================== //'Script Name: XOOPS Module PopnupBlog = 2.52 postid BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page : http://www.bluemooninc.biz/...

XOOPS WF-Section Module print.php articleid Parameter SQL Injection

The remote host is running the WF-Section module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'articleid' parameter of the 'modules/wfsection/print.php' script before using it to build a database...